CVE-2024-23610: high-severity vulnerability in NI LabVIEW
Out of Bounds Write Due to Missing Bounds Check in LabVIEW
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
LabVIEW has a flaw that allows writing data outside memory boundaries when processing specially crafted files, potentially letting attackers run malicious code if a user opens a compromised file.
An out-of-bounds write vulnerability exists due to missing bounds validation in LabVIEW's VI file processing. Attack vector requires user interaction (opening a malicious VI file); successful exploitation enables arbitrary code execution in the context of the LabVIEW process. Affects LabVIEW 2024 Q1 and earlier versions.
In the same product, most dangerous first.